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(54)Titie: MEIHOD AND SYSTEM FOR ALU)CATnsrG AND REDEEMING INCENTIVE CREDITS 



(57) Abstract 

A customer incentive syst^ involving a plaiality of service or meichandise 
providers comprises a customer-carried, portable (tevice (74). a provider device 
(76), and a base device (72). To earn incentive credits, the customer enters into a 
transaction with one of the provide participatiiig In the incentive system (70). A 
transaction amount b derived from the transaction and, based on this amount, 
an incentive credit amount is computed. The base device (72) perfonns diis 
computaticm by dedving an incentive code and cross-referencing this hicentive 
code with an customer Incentive codes stored on the customer-carried device 
(7^ and incenthre program codes stored on the provider device (76) to derive 
an faicentive rate. This incentive rate is ^plied to the transaction amount to derive 
the incoitive amount The incentive amount is stored on the customs-carried 
device (74). To redeem the incentive credits stored on the customer-carried device 
(7^, the customer enters into a second transaction with the same provider or 
anotlier participating provider. A second transaction amount is derived from this 
transaction and the customer may choose to redeem some or all of the incentive 
credits stored on die customer-carried device (74) to lower the transaction amount 
When incentive credits are redeemed, they are subtracted from the incentive amoum 
on the customer-carried device (74). By using a custoracr-canied device (74), 
transactions may be conducted off-line. Thus, no concurrent communications link 
widi a central authority is needed. 
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METHOD AND SYSTFM FOR AT T nPATTN G A^mPT^T^7^flN^mrT^^mvp 

Field of the Invention . 
5 This invention relates generally to transaction systems and more particularly to a 

method and system for implementing a multiple provider incentive program in an off-line 

or a selective on-line enviiomnent which allows multiple transactions to be processed 
simultaneously for a large number of service and merchandise providers and producer " 
(multiple providers). Inctoded in this system is a dynamic allocation system for collecting. 
10 transferring, and distributing funds arrwng participating parties. 

Description of Backgrounrf An 

A wide variety of customer incentive programs have been developed in the past to 
motivate customers to make purchases from one or a group of service or merchandise 
15 providers. These programs, such as coupon and rebate programs, were effective in 

attracting customers to conduct one-time purchases but, for the most part, were ineffective 
in motivating customers to return to the same provider for future purchases. This "future 
business" aspect is an important part of an effective incentive program. Another important 
aspectofaneffectiveincentiveprogiBmis variety. Generally, customers want to have a 
20 large number of choices with regard to the products and services they buy. In order to 

have such a variety, a large number of different providers and producers need to participate 
in the incentive program. 

A particular program which has both of the desirable aspects noted above is a 
large-scale credit incentive program, wherein for each purchase transaction, incentive • 
25 credits from multiple providers are computed and awarded to the customer. These 

incentive credits may be redeemed by the customer in a future transaction to pay for all or 
a part of the fiiture transaction amount The incentive credits may be earned at an^ 
transaction site and redeemed at any transaction site. Because the incentive credits may be . 

redeemed only .in a fiitiirc transaction, the customer has an incentive to return to make - 
30 another purchase from a participating provider. Since the program is large-scale, and 
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hence, encompasses a large number of different providers, the customers are offered the 
variety they desire. Therefore, such an incentive program should be effective. 

Due to the large number of parties involved, and the simultaneous processing for 
one or more of these parties, an overaU system for coordinating the computation, 
5 coUection, allocation and redemption of incentive credits is needed in order to implement 
such an incentive program. The inq)lementation of such a system may take one of several 
possible forms. First, the qrstem may be implemented as a centralized system wherein for 
each allocation and reden^tion of incentive credits, a central authority is concurrently 
contacted to report the results of the transaction and to obtain autfiorization for Ae • 
10 transaction. Such an implementation would require that a communications Unk be 
established with Ae central authority each tinw a transaction is conducted. TTiis 
implementation is slow and inefficient and also imposes a heavy load on communicatioiis 
channels. 

As a better alternative, the system may be implemented with a common lecord- 
15 keeping facility and a plurality of off-line transaction sites. In this system, substantiaUy all 

transactions are conducted off-Une, with the results beuig recorded at the transaction site. 

At some point after the transaction, the results are transmitted to the record-keeping 

facility for posting and account reconciliation. The record-keeping faciUty is not used as a 

central audiority. Rather, authorization of the transaction is done at the transaction site 
20 during the transacticm, which means that the transaction is conducted more quickly and 

effidcndy. For this reason, tiiis alternative implementation of the system is preferred. 

Cuircntly, however, there is no system believed to be available which implements the 

above-described system safely and effectively. 

25 Summarv of tiie Invention 

In accordance with the present invention, tiiere is provided a system for effectively 
implementing a large-scale incentive program comprising a customer-carried portable 
device (74) for holding customer-specific information, a provider device (76) for holding 
provider-specific information, and a base device (72) for coordinating the interaction of 

30 die customo^ and provider devices and for providing an environmrait in which a 
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transaction may be conducted. In the prefened embodiment, the customer device (74) and 
the provider device (76) botii take die form of a processor card or "smart card". Each card 
comprises a processor, a read-only memory (ROM) for storing a control program, and a 
non-volatile memory for storing and securing the customer-specific or provider-specific • 
5 information. Togetiier, the three devices hold all of the information needed to conduct 
most transactions. ConsequenUy, there is no need in miKt transactions to consult a 
common authwity, which means that most transactions may be conducted off-iine. TheiB 
may be certain situations, however, in which a common authority or multiple authorities ' 
need to be consulted for further authorization and instructions. In such instances, the 
10 selective on-line mode of the present invention is invoked to establish a communications 
link witii the common or multiple autiiorities to receive autiiorization and instnictipns 
therefrom. Ihis may be done Miiile all other processes are carried out off-line. 

In the system of the present invention, each of the devices preferably cooperates 
widi the other devices to cany out the mediod of the present invention. TTiat is, the 
15 various devices operate interactively to carry out an oveiall process. By operating in tills 
manner, tiie individual requirements of each of die parties can be taken into account 
In accordance vnth the metiiod of die present invention, incentive credits are 
allocated and redeemed by first conducting a transaction between a customer and a 
provider. From tiiis transaction, a transaction amount is derived. After die transaction 
20 amount is derived, an incentive credit total stored in die customer device (74) is checked to 
determine whetiier it has a zero value. If so, the customer has no incentive credits to 
redeem. However, if incentive credits are stored on die customer device (74), the 
customer is asked whedier he wishes to redeem any of die accrued incentive credits, and if 
so, how many. Where an affirmative response is received, a specified number of incentive 
25 credits are redeemed to lower die transaction amount by a discounted amount. TTie 

number of incentive credits redeemed is subtracted from die incentive credit total stored in 
die customer device (74) to update diis total. Thereafter, die number of incentive credits 
earned in die present transaction is computed along with die credit incentives offered by 
additional providers to derive an incentive credit amount This incentive credit amount is 

30 added to die incentive credit total stored in die customer device a4) to again update die 
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total. The newly eameaimentive credits nay be redeemed in a future trans^^ 
Incentive credits arc tiius allocated and redeemed in accoidance with the present invention. 

The process described above is performed for each transaction. At the end of each 
transaction, information relating to the transaction such as the transaction amount, die 
5 discounted amount, and the incentive credit amount is stored. Then, at some point affer 
die transactions (preferably at die end of each day), die stored information is tnmsmitted to 
a record-teqjing facility for records posting and account reconciliation. For each 
incentive credit allocated, funds and/or discounts from participating providers are 
electronically transferred to, or die providers pay a certam amount to, a trust account, and 
10 for each incentive credit redeemed, die provider redeeming die incentive credits receives a 
certain amount from tiie trust account as agreed upon by prior agreement Funds from die 
incoitive program are dios reallocated from provider to provider. 

Brief Description of the Drawin ps 
1 5 Fig. I is a flow diagram of die steps carried out in allocating incentive credits in 

accordance widi die mediod of tile present invention. 

Fig. 2 is a flow diagram of die steps carried out in redeeming and aUocating 
additional incentive credits in accordance widi die mediod of die present invention. 

Fig. 3 is a block diagram of a preferred embodiment of die system of die present 
20 invention. 

Figs. 4a-4d provide a flow diagram of die control program 103 executed by die 
base processor 100 of Fig. 3. 

Fig. 5 is a flow diagram of die control program 84 executed by customer processor 
80 of Fig. 3. 

25 Fig. 6 is a flow diagram of die control program 94 executed by provider processor 

90 of Fig. 3. 

Fig. 7 is a flow diagram of die control program 122 executed by RDD processor 
118 of Fig. 3. 

Fig. 8 is a detailed flow diagram of die initialization step 130 shown in Fig. 4a. 
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fig. 9 is a flow diagram of the selective on-line mode Of operation of base 
processor 100 of Fig. 3. 

Detailed Description of the Preferred Fn^f^n^itn^ntc 
5 Before describing the invention in detaU, a brief discussion of the consideratior - 

underiying the invention will be provided to facilitate a complete understanding of thr 
invention. One of the objects of the present invention is to provide a system for 
implementing a large-scale customer incentive program. Such a system preferably allows 
a large number of service and merchandise providers and producers to participate in the 
10 incentive program, and also aUows customer/provider transactions to be carried out mostly 
off-line but selectively on-line, if necessary. The off-line aspect of the system gives rise to 
several system considerations. First, because most transactions are preferably carried out 
off-line, no communications link is established with a common authority during most 
transactions. This means that during most transactions, a common autiiority cannot be 
15 relied upon to store or to provide information relating to the mcentive program. Rather, 
this information needs to be stored in some means which may be accessed during the off- 
line transactions. In view of this consideration, die system of the present invention is 
preferably implemented using a customer device and a provider device. The customer 
device stores and maintains incentive program information relating to a specific customer 
20 while die provider device stores and maintains incentive program information relating to a 
specific provider. Togedier. these two devices provide most of the information needed to 
carry out a transaction. The customer device is preferably a portable device so that a 
customer may conveniently carry the device from provider to provider. This portability, 
combined with the customer-specific incentive program information stored on the device. 
25 aUows die customer device to be used off-Une at any transaction site. 

Other considerations prompted by the off-line nahire of the system are that of 
computing multiple card files and incentives, and temporary storage of transaction 
inforaiation. Since most transactions are performed off-line, information relating to die 
transaction is not tiansmitted to a record-keeping facUity for posting until some time after 
30 die transaction is completed. This means that the transactional information needs to be 
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temporarily stored. Preferably, a base device is used for this puipose. The base device 
preferably also couples to the customer and provider devices to cooidinate their 
interaction. Therefore, the system of the present invention preferably comprises a base 
device, a provider device, and a customer-carried portable device. Each of these 
5 components will be described in greater detail in a subsequent section. 

With reference to Figs. 1 and 2. the method of the present invention wiU now be 
described. Fig. 1 iUustrates the steps carried out in an initial ttansaction wherein incentive 
credits are earned fiom a first provider, and Eg. 2 shows the steps taken in a subsequent ' 
transaction wherein incentive credits are redeemed and earned fiom a second provider. 

10 The first and second providers may be the same provider or they may be different 

providers participating in the same incentive program. The term provider is used hertin to 
mean a transaction partner to the customer. TTie provider may be an inteimediaiy who 
offers goods and services made or perfonned by other producers, or the provider may be a 
producer offering its own goods or services. TTie term provider should be interpreted 
15 broadly. For tiie sake of clarity, it should be noted here that when incentive credits are 
earned, they are earned not only from the provider participating in the transaction but from 
all of the providers participating in the incentive program. This is due to the manner in 
which funds are reallocated among tiie providers which grant ti»e incentive credits and the 
providers which redeem die mcentive credits (as will be explained later). For tiie sake of 
20 simplicity, however, incentive credits will be described herein as being granted by die 
provider participating in the transaction. 

The term services should also be interpreted broadly. Services may include 
entertainment, insurance, healtii care services, banking services, investment consultation, 
govemement services, travel services, interactive television, intermediary services such as 
25 charity coUection services, and otiier types of services as well. Thus, tiie present invention 
has application not just in the sales arena but in many otiier contexts as well. The 
following description should be read with this in mind. 

Referring to Fig. 1. die first step praformed in any transaction is the verification 
step 20. Because tiie customer device is portable and thus may be lost, the verification 
30 step 20 is necessary to prevent fraudulent use of tiie portable device. The verification 
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process is twofold. First, the device itself is checked to determine whether it is a proper 
device for use in the incentive program. This is preferably done by having the portable 
device exchange encrypted signals with the base device. Second, the user of the device 
(the customer) is checked to determine whedier he is a vaUd user. User verification is 
5 preferably performed by requiring Aat the user enter a user code and comparing the 
entered user code with a reference user code stored within the portable device. Only if 
both the portable device and the user are valid will a transaction between a customer and a 

provider be aUowed to take place. The verification process has dius far been described ' 
only in connection with the customer-carried device, but it should be noted that die same 

10 process may also be perfonned on the provider device. This is desirable where die 
provider device is also a portable device, which it is in the preferred embodiment of die 
present invention. 

After die devices and user are verified to be valid, an off-line transaction between 
die customer and the provider can commence. At tfiis point, all appUcable files stored on 
! 5 die customer device are opened for the purpose of processing and computing incentive 
credits. Ihe transaction may be a purchase of a good or a service ftom die provider. From 
dus transaction, a transaction amount is derived 22. Based an .he transaction amount, and 
periiaps some otfier criteria such as die level of participation by multiple providers, die 
number of montfdy transactions, and ottier programmable options, an incentive credit 
20 amount is computed 24. The incentive credit amount represents die amount of credits to 
be allocated to die customer ftom die present purchase. This incentive credit amount is 
not applicable to die present transaction but may be redeemed only in a future purchase. 
Thus, die customer has an incentive to enter into a future transaction wich die same or 
another participating provider. 
25 The process of computing die incentive credit amount is a muld-step process. 

Fust, based on die transaction, an incentive code is derived from die base device. This 
mcenrive code is processed widi an incentive program code stored witiiin die provider 
device and a customer incentive code stored widiin die customer device to derive an 
incentive rale. Optionally, additional provider codes, which may be stored in die customer 

30 device and/or die base device, may be used to compute an augmented incentive rate which 

7 



wo 95/21428 



PCTAIS95/01432 



gives the customer an even greater discount Thereafter, the incentive rate or the 
augmented incentive rate is applied to the transaction amount to derive the incentive credit 
amount Note that aU three devices participate in the computation process. Commuting the 
incentive credit amount in this manner allows the specific needs of each of die parties to^ 
5 be taken into consideration. 

To elaborate, suppose that the transaction amount arises from die purchase of a 
television set A television set has a particular incentive code (stored in die base device) 
associated with it This incentive code is cross-referenced with die incentive program 
codes stored witiiin die provider device. The provider may have a variety of incentive 
) program codes stored in die provider device, witii each code corresponding to a particular 
incentiveplan. Some of tfiese plans may apply to electionic products such as television 
sets and some may apply to otfier ^ of products. By aoss-referendng die incentive 
code widi die incentive program codes, die plans which apply to die purchased product are 
ascertained. The applicable incentive program codes arc diereafter cross-referenced widi 
die customer incentive code and odier applicable codes stor«i widiin die customer device 
to determine which specific incentive plan applies. For example, die customer may be a 
member of die "sUver" plan so diat die "silver incentive plan" applies, and die customer " 
may have a manufacturer's rebated filed on his device. Once die applicable plan is 
ascertained, die incentive rate is derived and applied to die transaction amount to compute 
die incentive credit amount Note diat computing die incentive credit amount in 
accordance widi die process above allows each party to set forth its own individualized 
terms. That is. each provider may have its own customized schedule of incentive plans, 
and each customer may choose to participate in a specific plan. By allowing multiple 
parties to participate in die computation process, die specific terms set forth by each party 
can be taken into account. 

As a futdier example, die incentive credit amount rriay be computed in a slightiy 
different manner. Instead of using codes to derive an incentive rate, die codes diemselves 
may be moentive rates. For example, die incentive code from die base device may 
represent an incentive given by die manufacturer of die television set die incentive 
program code in die provider device may represent die incentive offered by die provider. 
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and the customer incentive code in. the customer device may represent an additional 
incentive to which the customer is entitled. TTie customer incentive code may also indicate 
what portion of die earned incentive credits should be contributed to a charity. Summing 
up all of these codes, along with codes from additional participating provider (optional). 
5 gives the total incentive rate appUcable to the transaction amount The incentive credit " 
amount is computed using this incentive rate. This and other mediods may be used for 
computing the incentive credit amount. The important poim is that tiie incentive credit 
amount is preferably computed in a process which aUows for multiple-party participation. " 
Once the incentive credit amount is calculated, it is sent to the customer device to 
10 update 26 an incentive credit total stored in the customer device. TTie incentive credit total 

nspresents the number of incentive credits Uw customer has earned in tiie incaiti^^ 
piDgnun. Ite incentive credit total is updated by adding the incentive credit amount to die • * 
total. Thereafter, information relating to die transaction is stored 28 m each of the devices. 
In die customer device, information such as the transaction amount, the incentive credit 

15 amount.tfienameoftheprovider,andti,cpn)ductorservicepurchasedisrecordedto 

maintain a journal of all transactions made using the customer device. Similar infonnation 
is stored in the provider device. In die base device, complete information relating to die 
transaction, including the identifications of the customer and die provider, die transaction 
amount, the incentive credits earned, die good or service purchased, and die customer's 
20 demographics are stored. 

AfteraUoftiierelevantinformationisstored.d,etransactioniscompleted. Intiie 
course of a day. a plurality of transactions are probably conducted in die manner described 
above, wiUi relevant infonnation being stored at die end of each transaction. At some 
point after completion of die transactions (preferably at die end of die day), die transaction 
15 mformation stored in die base device is transmitted 30 to a reconi-keeping facility. Such a 
facility is utilized to coordinate die allocation and redemption of incentive credits among 
die various providers. The transmitted infomiation is used for records posting and account 
reconciliation. At some point after die transactional infonnation is posted widi d« record- 
keeping fecility, die provider issuing die incentive credits makes a payment 32 to a tnist 

10 accomit in an amount which is proportional to die incentive credit amount. ITius. for each 
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incentive credit issued, a provider pays a certain amount into the trust account The funds 
accumulated in the trust account are used to compensate providers who redeem incentive 
credits. ■' 

Alter incentive credits are earned, diey may be redeemed in a subsequent 
5 transaction with a participating provider. The process of redeeming and/or further earning 
incentive credits is iUustrated in Fig. 2. To redeem incentive credits, a customer enters 
into a second transaction with eifter the same provider or another participating provider. 
But before this second tiansaction may transpire, verification step 40 is perfonned. Step 
40 is identical to step 20 (Fig. 1) previously described, namely, step 40 verifies that the 
10 customer and provider devices are valid devices, and verifies that the user and provider are 
valid users of the devices. If the users and devices are valid, tiien a transaaion is allowed 
to take place. A transaction amount is derived 42 from this transaction. 

After the transaction amount is derived, the incentive credit total stored in the 
customer device is checked 44 to detennine whether it has a zero value. If so, then there 
15 are no incentive credits to be redeemed. However, if the incentive credit total is non-zero, 
the customer is queried 46 as to whether he wishes to redeem any incentive credits. If not, 
tiien the process continues on to step 52, but if the customer wishes to redeem some of his 
incentive credits, then at least a portion of the incentive credit total is applied 48 to die 
ttansaction amount to reduce the transaction amount by a discounted amount. The new 
20 adjusted amount (equal to tiie transaction amount minus the discounted amount) represents 
the amount, if any, now owed by the customer to the provider. After the incentive credits 
are redeemed, the incentive credit total stored in tiie customer device is reduced 50 by die 
number of incentive credits redeemed. 

After previously earned incentive credits are redeemed, the incentive credit amount 
25 earned in the current transaction may be computed 52. Computation step 52 is identical to 
computation step 24. After die incentive credit amount is calculated, the incentive credit 
total in die customer device is updated 54 to indicate the addition of the incentive credit 
amount. 

Thereafter, information relating to die transaction is recorded 56 in each of die 

30 devices. In die customer device, information such as die transaction amount, the incentive 
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credit amount, the number of incentive credits redeemed, the name of the provider, and the 
product or service purchased is recorded to maintain a journal of all transactions made 
using die customer device. Similar information is stored in the provider device. In die 
base device, complete information relating to the transaction, including the identifications 
5 of die customer and the provider, die transaction amount, the uicentive credits earned, die 
incentive credits redeemed, the good or service purchased, and die customer's 
demographics arc stored. After all relevant information is properly stored, the transaction 
is completed. 

At some point after the transaction is completed, die information stored in die base 
10 device is transmitted 58 to die record-keeping facility for record posting and account 
reconciliation purposes. Then, at some point after records are posted widi die record- 
keeping facility, die provider setfles accounts witfi die trust account In die transaction just 
completed, die provider bodi redeemed and aUocated uicentive credits. Thus, die provider 
will receive 60 from die trust account a payment in an amount proportional to die number 
15 of incentive credits redeemed, and will pay into die trust account an amount proportional 
to die incentive credit amount. Incentive credits arc dius allocated and redeemed 
according to die method of die present invention. 

Witti reference to Fig. 3, diere is shown a block diagram of a system 70 which may 
be utilized to implement die mediod of die present invention. System 70 preferably 
20 comprises a base device 72. a customer device 74. and a provider device 76. The customer 
and provider devices 74. 76 are botii preferably portable devices which are coupled to die 
base device 72 dirough devics interface 78. 

As shown in Fig. 3, customer device 74 preferably comprises a customer processor 
80 coupled to a read only memory (ROM) 82. ROM 82 contains widiin it a contitil 
25 program 84 which is executed by die processor 80 to carry out die operations required of 
die customer device. More will be said about die control program 84 in a subsequent 
section. Also coupled to die processor 80 is a random access memory (RAM) 86 and a 
non-volatile memory 88. RAM 86 is used as a scratch-pad memory for temporarily storing 
manipulated data while non-volatile memory 88 is used as a permanent memory for storing 
30 important im'ormation relating to die device 74. The information stored witiiin 
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volatile memory 88 includes: (I) a reference user code; (2) an incentive credit total which 
represents the number of incentive credits that have been accrued; (3) one or more 
customer incentive codes; (4) incentive program data such as account information, 
customer device identification, and telephone numbers of control centers; (5) financial 
5 transaction data such as an available credit or debit amount, the identification of a financial 
institution, die account numbers within the institution, financial rules, and the telephone 
number of the institution; (6) demographics of the customer, and (7) information relating 
to past transactions canied out using the device. As mentioned previously, device 74 is ' 
preferably a portable device. In die preferred embodiment, customer device 74 takes the 
10 form of a processor card or a "smart card" as it is sometimes known in the ait Card 74 
may be an International Standards Organization (KO) type "78 16 IC card" or it may be a 
Personal Conqmter Memoiy Card Inlemational Association (PCMCIA) type card or it may 
be anodier type of card. The device interface 78 is preferably of the proper type to 
interface with the customer card 74. In the preferred embodiment, customer card 74 may 
15 be used for more than just implementing the incentive program. It may also be used as a 
debit card or a credit card to acnially autfjorize payment of a transaction amount at the 
conclusion of a transaction. It is for this reason that financial transaction data is stored 
within the non-volatile memory 88. This aspect of device 74 will be elaborated upon in a 
later section. 

20 Like customer device 74, provider device 76 also preferably takes the form of a 

processor card. Provider card 76 may be of tiie ISO type, PCMCIA type, or some other 
type of processor card. Card 76 is preferably of the same type as card 74 so diat they may 
both share a single device interface 78. As shown in Fig. 3. provider caid 76 preferably 
comprises a provider processor 90. a ROM 92, a RAM scratch-pad 96. and a non-volatile 

25 memory 98. The ROM 92 contains within it a control program 94 which is executed by 
the provider processor 90 to cany out the functions required of the provider device 76. 
The control program 94 wUl be described in a subsequent section. Li provider device 76. 
non-volatile memory 98 is used as a permanent memory to store important information 
relating to die provider. This information includes: (1) incentive program data such as the 

30 provider's identification and telephone number, (2) a plurtUty of incentive program codes; 
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(3) a reference provider code; and (4) infonnation relating to transactions carried out using 
the provider card 76. In short, non-volatile memory 98 stores the provider-specific 
infonnation needed to carry out a transaction. 

The base device 72 of system 70 serves two major fimcUons. First, it provides a 
5 mechanism for coordinating the intraaction of the customer and provider devices 74, 76. 
Second, it provides a complete environment in which customer/provider transactions may 
be conducted. To cany out both of these function, base device 72 preferably comprises a 
base processpr 100, memory 102, receipt printer 104, UPC code scanner 106, display 1 08. * 
keyboard 1 lij^mmunications interface 1 12. security appUcation module leceptacle 1 14. 
10 and device interface 78. All of these conq)onents 102-1 14. 78 arc coupled to die base 

processor 100 by a common bus 101. The keyboard 1 10 and display 108 serve as the main 
interface to die customer and operator of die base device, while the receipt printer 104 
provides a hard memorial of the transaction. The UPC scanner 106 serves as an input 
device for entering purchases into the base device whUe the communications interface 1 12 
15 serves as a link to a communications networic to allow the base device 72 to contact die 
outside world The security application module receptacle 1 14 of base device 72 is an 
optional feanire. For certain customer and provider cards, speci e procedures may need to 
be earned out in order to verify that the cards are valid. For such cards, a security 
appUcation module 1 14 may need to be incorporated into the base device T^to perform die; 
20 special verification procedures. The security application module receptacle 1 14 may be 
used for incorporating such a module. 

TTie memory 102 of base device 72 is probably die most important component in 
the device because it contains witiiin it a control program 103 which, when executed by 
base processor 100, causes the pn)cessor 100 to carry out all of die functions necessary to 
25 conduct a transaction. Under control of program 103. processor 1 00 coordinates the 
interaction of die various devices, interfaces widi Uie customer and operator of the base 
device, and processes die transaction. In addition to storing program 103. memory 102 
may also be used to store information relating to die transaction. 

Base device 72 may be implemented using only the components dius far described; 

30 however, in die preferred embodiment, base device 72 further comprises a removable data 
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device (RDD) 1 16. Device 1 16, like the customer and provider devices 74, 76, is 
preferably a processor card which is coupled to the base processor 100 through device 
interface 78. RDD 1 16 preferably comprises a processor 1 1 8 coupled to a ROM 120, a 
RAM 124, and a non-volatile memory 126. ROM 120 contains a control program 122 
5 which, when executed by processor 1 18, controls the operation of the RDD 1 16. Non- 
volatile memory 126, meanwhile, is used to store information necessary for conducting 
transactions. Such information includes: (1) product codes; (2) pixxiuct prices and 
descriptions; (3) incentive codes; and (4) infonnation relating to each transaction. It is 
possible to incorporate the functions and information of the RDD 1 16 into the control 

10 program 103 and memory 102 of the base device 72 and to eliminate the RDD 1 16 

altogetfier. Howcvct, use of the RDD 1 16 is preferred because this aUows base device 72 
to be updated quickly and easily. For exanq)Ie, product prices may be updated by simply 
inserting an updated RDD 116 mto die base device 72 instead of altering the contoits of 
memory 102. Likewise, different functionality may be imparted to die base device 72 by 

15 inserting a newly programmed RDD 1 16 into the device rather than by altering control ' 
program 103, For the sake of convenience, RDD 1 16 is preferably included in die base, 
device. 

The system 70 of the present invention is preferably an interactive system, that is, 
all of the devices 72, 74, 76, 1 16 in the system 70 cooperate to conduct a transaction. 

20 Because the devices work togetiier. and because the control programs 84, 94, 103, 122 
control the operation of die devices 72, 74, 76, 116, tiiis means tfiat die control programs 
are also interactive widi each other. Since the control programs arc interactive, dieir 
description is best understood if they are described in relation to one another. A flow 
diagram for the base control program 103 is provided in Figs. 4a-4d, a flow diagram for 

25 die customer control program 84 is provided in Fig. 5, a flow diagram for the provider 

control program 94 is provided in Fig. 6. and a How diagram for the RDD control program 
122 is provided in Fig. 7. The operation of system 70 will be described widi reference to 
these flgures. 

The operation of system 70 commences with an initialization process 130 carried 

30 out by die base processor 100. The initialization step, which is usually performed after an 

lA . - 
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initial power-up. is illustrated in greater detail in Fig. 8. wherein the first step in the 
process is to reset 220 aU counters, registers, and devices in the base device 72. After the 
reset procedure, base processor 100 sends a prompt to the display 108 to request 222 the 
insertion of a RDD 1 16. After die operator of the base device 72 complies witii this 
5 request, base processor 100 initiates a verification process witfi the RDD 1 16 by 

generatmg and sending 224 a set of encrypted signals to the RDD 1 16. TTiese signals pass 
from processor 100 to the RDD 1 16 via device mterface 78. Hereinafter, it wiU be 
understood diat signals pass between the base processor 100 and the devices 74, 76, ; 1 16 
via the device interface 78. The RDD processor 118 responds by leceiving 320 (?ig. 7) 
10 and deciypting the enciypted signals and. in turn, generating 322 and sending a set of 
encrypted signals ofits own tothe base processor 100. Base processor 100 receives and 
decrypts 226 (Kg. 8) these signals to detennine whether die RDD is a vaUd device for use 
in a transaction, ftefeiably. all of die devices for use in die same mcentive program are 
programmed widi die same set of encryption and decryption keys so diat die various 
15 devices can recognize each odier. If base processor 100 determines 228 diat die RDD 116 
is not a valid device for use in a transaction, it ejects die inserted RDD and requests 
anodier one. On die odier hand, if die RDD is valid, die mitialization process is continued. 

Base processor 100 next sends a prompt to die display 108 to request 230 insertion 
of a provider caid 76. After a card is inserted, base processor 100 generates and send 232 
) anodier set of encrypted signals, diis time, to die provider device 76. Provider processor 
90 responds by receiving and decrypting 290 (Fig. 6) die encrypted signals, and generating 
and sending 292 its own set of encrypted signals. Base processor 100 receives and 
decrypts 234 (Fig. 8) diese signals and, based on die decryption result, detemiines 236 
whedier die provider card 76 is a valid device. If invalid, die provider card is ejected and 
anodier card is requested. However, if die provider card is valid, dien control is 
transferred to die provider card 76. Provider processor 90 accepts control and sends 294 
(Fig. 6) a prompt to die display 108 requesting diat die provider enter a provider code. Hie 
provider code is entered dirough die keyboard 1 10 and sent to die provider processor 90. 
ftovider processor 90 compares 296 die entered code widi a reference provider code 

stored in non-volatile memory 98 to determine 298 whedier die entered code is valid. If 
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invaUd. another request is sent to the display, but if tiie entered code is vaUd, thai control 
is transferred back to the base processor. The initialization process is thus completed. TTie 
system 70 is now ready to accept a customer card to commence a transaction. 

Referring again to Fig. 4a, after initiaUzation. base processor 100 sends a prompt to 
5 the display 108 to request 132 the insertion of a customer card. Upon insertion, base 
processor 100 generates and sends 134 a set of encrypted signals to the customer card. 
The customer processor 80 receives and decrypts 240 (Fig. 5) the encrypted signals, and 
responds by generating and sending 242 a set of encrypted signals to the base processor ' 
100. The base processor 100 receives and deciypts 136 (Fig. 4a) these signals and 
. 10 , determines 138 whether the customer card 74 is a valid device. If not. the inserted card is 
ejected and another request is sent to the display 108. However, if the card is a valid 
device, then control is transferred to the customer card 74. The customer processor 80 
accepts control and sends 244 (Fig. 5) a prompt to the disphiy 108 requesting the msertibn 
of a user code by the customer. The requested user code, entered through keyboard 1 10, is 
15 received by the customer processor 80 and compared 246 to the rcfertmce user code stored 
in the non-volatile memoiy 88. If the codes do not match 247. then customer processor 80 
requests that another user code be entered. However, if the entered user code is vaUd. then 
customer processor 80 proceeds to step 506. 

Step 506 serves as an extra security dieck for ensuring that the custorner is not 
20 using a lost or stolen customer card. In step 506, customer processor 80 checks for certain 
indications of possible fraudulent use. To elaborate, processor 80 determines whether the 
current transaction is the first transaction made using the customer card in a long period of 
time (a month, for instance). This might indicate that the card was lost and is now being 
used by an unauthorized user. Processor 80 also determines whether die current 
25 transaction amount is unusually high or exceeds a certain preset limit. In addition. 

processor 80 deteimines whether Uiere has been an unusually large number of transactions 
conducted using the card. Processor 80 may check for otiier indications of possible 
fraudulent use of the customer card. Customer processor 80 has access to all of die '~ 
information necessary for making the above determinations since information relating to 
30 past transactions made using tiie customer caid is stored in non-volatile memory 88. If 
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none of the above criteria are met, customer 80 transfers control back to base processor 
100. However, if any of the above conditions is satisfied, customer processor 80 generates 
and sends 508 an on-Une control signal to the base processor 100, Customer, processor 80 
further sends 510 control center information and customer card identification information 
5 to the base processor 1 00. The base processor 100 receives 1 39 (Fig. 4a) the control and 
information signals and, if the on-line control signal is active 140, processor 100 enters 
141 into selective on-line mode to contact a common control center for fiiither 
information, while processing all other functions off-line. 

The selective on-line mode of operation is illustrated in detaU iii Fig. .9. Base 
10 processor 100 begins operation in this mode by determining 350 whether- fraud detection is. 
die reason for invoking this mode of operation. If so. base processor 100 uses the control 
center information received from customer processor 80 to establish 352 a 
communications link witii the control center via communications interface 1 12. After the 
link is established, base processor 100 sends the customer card identification information 
15 to tiie common control center. The control center uses diis identification information to 
determine whether die customer card 74 has been reported lost or stolen. If die customer 
card 74 is not lost or stolen, no action is taken and die customer can! is allowed to 
participate in a transaction. However, if tfie customer card is determined 356 to have been 
lost or Stolen, base processor 100 generates and sends 358 a deactivation sigiial to the 
20 customer device 74. Customer processor 80 receives this deactivation signal and, if the 
signal is active 512. customer processor 80 deactivates 514 the customer device 74 so tiiat 
die device 74 can no longer be used to conduct the currem transaction or any other future 
transaction. Thus, once a customer card is determined to be lost or stolen, it is deactivated 
to preclude die possibility of any future fraudulent use. This is in sharp contrast to 
25 magnetic stripe cards which cannot be deactivated. If a customer card is deactivated, base 
device 72 ejects die card and loops back to step 132 (Fig. 4a) to request anodier customer 
card. 

If it is determined diat aU devices and users are valid, a transaction is commenced. 

Base processor 100 begins a transaction by receiving 142 a product or service code. This 

30 product code may be scanned in by way of UPC scanner 106 or it may be entered tiirough 
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the keyboard 1 10. Base processor 100 sends 144 this product code to the RDD 1 16 for 
processing. Upon receiving the product code, RDD processor 1 18 processes 326 (Fig. 7) 
the code to derive a product price, a product description, and an incentive code associated 
with the product. This step 326 is preferably carried out by performing a table look-up 
5 procedure through the non-volatile memory 126 where this information is stored. Once 
die information is found, RDD processor 1 18 sends 327 the information to the base 
processor 100. In response, base processor 100 receives 146 (Fig. 4a) the infomiation, 

sends 148 it to the receipt printer 104 for printmg, and stores 150 it temporarily in the 
memory 102. Thereafter, base processor 100 sends a prompt to the di^lay 108 inquhing 

10 152 whether more purchases are forthcoming. Jfmore purchases are forthcoming, steps 
142-150 are repeated. Note that the incentive code and the price for each product ' 
purchased is stored in memory 102. This information wiU be used subsequently when the 
incentive aedit amount is computed. After all itenas are purchased, base processor 100 
sums up all of the product prices to derive 154 a transaction amount. This transaction 
15 amount represents a subtotal of the items purchased. 

After the transaction amount is derived, base processor 100 determines 156 
whether die customer card 74 has any incentive credits to redeem. Base processor 1 00 
makes this determination by checking the status of a control signal ftom customer 
processor 80. The status of tiiis control signal depends upon the incentive credit total 
20 stored in the customer device non-volatile memory 88. In step 250 (Fig. 5), the customer 
processor 80 checks 250 the incentive credit total stored in non-volatile memory 88, and if 
this total is non-zero, tiien customer processor 80 generates and sends 252 a control signal 
to the base processor 100 to indicate the presence of redeemable incentive credits. 
Otherwise, no control signal is generated Preferably, customer processor 80 provides only 
25 an mdication of whether there are redeemable credits stored in non-volatile memory 88. 
Base processor 100 preferably is given no access to how many incentive credits are 
acmally stored therein. TTiis allows tfie incentive credit amount to remain private. 

If the control signal from customer processor 80 indicates no redeemable incentive 
credits, then base processor 100 skips over die redemption steps 158-176. However, if 
30 there are redeemable credits, base processor 100 requests 158 a maximum redeemable 
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amount from RDD 1 16. The RDD processor 1 18 receives 328 (Eg. 7) this query"^and 
calculates 330 a maximum according to a predetennined set of rules, "niese hiles may take 
into account a plurality of factors. For example, perhaps only a certaii amount of 
incentive credits may be applied towards a particular type of product. Perhaps some of die 
5 products may not be purchased at aU using incentive credits. These rules may be set by the 
participants in the incentive program. After calculating this maximum amount. RDD 
processor 118 sends 332 the maximum to the base processor 100. 

In response, base processor 100 sends 160 (Fig. 4b) the maximum amount to the ' 
display 108 to be shown thereon. Thisinformsthccustomerof how many incentive 
10 credits he may redeem. Thereafter, base processor 100 sends 162 a prompt to display 108 
to ask the customer how many incentive credits he wishes to redeem! In response, die 
customer enters the desired number tiirough keyboard 1 10 and this number is received by 
base processor 100. Base processor 100 then determines 164 whether the entered artiount 
exceeds authorized limits. TTiere may be limits imposed on how many credits may be 
15 redeemed in one transaction or there may be other limits. If any one or a combination of 
these limits is exceeded, base processor 100 enters 166 into selective on-line mode to 
obtiun fiirther authorization. This aspect of die selective on-line mode of operation will be 
described ma later section. Where no limits are exceeded, base processor lOOappliestiie 
desired number of incentive credits to tiie transaction amount to reduce 170 the tiansaction 
20 amount by a discounted amount Preferably, tiie discounted amount is equal to die number 
of incentive credits redeemed. Thereafter, the number of incentive credits redeemed is 
sent 172 to the customer card 74. TTie customer processor 80 receives 254 (Fig. 5) this 
number and reduces 256 the incentive credit total stored in non-volatile memory 88 by tills 
number. After sending die number of redeemed credits to die customer card 74. base 
25 processor 100 sends 174 the redemption information to the receipt printer 104 for printing 
diereftom, and sends 176 tiie same information to memory 102 for storage tiierein. The 
redemption process is thus completed. 

After the redemption process comes die incentive credit allocation process. Base 
processor 100 begins Uus process by retrieving 178 from die memory 102 die incentive 
30 code for one of die products purchased in die cunent transaction. Recall tiiat die incentive 
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codes for aU of \hc purchased products were previously stored in memory 102; thus, this 
infonnation is readily available to base processor 100. Base processor 100 submits 180 
this incentive code to both the customer card 74 and the provider card 76. The customer 
processor 80 receives 258 (Fig. 5) this incentive code and processes 260 it to derive a 
5 customer incentive code. This step is preferably in5)lemented by performing a table look- 
up procedure through the non-volatile memory 88 where the customer incentive code 
information is stored Customer processor 80 then sends 261 the derived customer 
incentive code to the base processor 100 for processing. SimUarly. provider processor 90 " 
receives 300 (Kg. 6) the incentive code and processes 302 it to derive incentive program 
10 codes. Providerprocessor90preferablyderivesthesecodesbyperfoimingatablelook-up 
procedure through non-volatile memory 98 where die incentive programs codes are stored. 
After retrieving the codes, provider processor 90 sends the codes to di^ base processor 100 
for processing. 

ITie base processor 100 receives 182 (Rg. 4c) die customer incentive code, oflier 

15 applicable incentive codes, and the incentive program codes and processes 1 84 diem to 

derive an incentive rate. Preferably, this processing step is performed as previously 

described using eiUier a cross-referencing or a summing approach. Once the incentive rate 

is obtained, it is applied to the purchase price (which is also stored in memory 102) of die 

purchased product to compute 186 the individual incentive credit amount attributable to 

20 diat product. Thereafter, base processor 100 checks 1 87 the memory 1 02 for more 

incentive codes from the current transaction. For each incentive code, an individual 

incentive credit amount is computed. When aU of the incentive codes have been 

processed, base processor sums up 1 88 all of Uie individual incentive credit amounts to 

derive an overall incentive credit amount This amount is tested 1 89 by base processor 

25 100 to determine whetfier it exceeds some audiorized limit. It may be that only a certain 

maximum amount of incentive credits may be earned in any one transaction and that Uiis 

amount exceeds that limit If an audiorized limit is exceeded, dien base prwessor 100 

enters 190 into selective on-line mode. This aspect of the selective on-line mode of 

operation will be described in a subsequent section. Odierwise, die incentive credit 

30 amount is sent 194 to die customer card 74. Customer processor 80 receives 262 (Fig. 5) 
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this amount and. in response, updates 264 the incentive credit total stored in non-volatUe 
memoiy 88 by adding the iiicentive credit amount to the incentive credit total. Thereafter, 
base processor 100 sends 196 (Fig. 4c) the incentive credit amount to die receipt printer 
104 for printing thercfrom and sends the same amount to the memoiy 102 for storage 
5 dierein. The incentive credit allocation process is now completed. 

The final phase of die transaction is tiie payment phase. Base processor 100 begins 
this phase by computing 199 tbs adjusted amount, which represents die difference between 
die transaction amount and die discounted amount. Then, base processor 100 sraids a 
prompt to display 108 to ask 200 die customer what form of payment he desires. The 
10 answer to diis prompt is entered via the keyboard and sent to die base processor 100. It 
was mentioned previously diat, to die preferred embodiment, customer card 74 may be 
used as a debit card or a credit card to audiorize payment If dus option is chosen 202. 
base processor 100 sends 204 die adjusted amount to die customer card 74. Odieiwise, 
processor 100 checks for payment audiorization. 
15 If die customer card is to be used for payment, die customer processor 80 receives 

267 (Fig. 5) die adjusted amount and processes 268 payment of die amount in accordance 
witii die financial data and rules stored in non-volatile memory 88. When used as a debit 
card, diere is typically sufficient information and audiorization stored on die customer card 
to cany out payment off-line. In some instances, however, such as when die Customer card 
20 74 has insufficient resources to audiorize die payment of die adjusted amount, furttier 
authorization or resource rcaUocation is needed. To obtain die audiorization or resource 
reallocation, customer processor 80 contacts 272 die financial institution whose 
information is stored in non-volatile memory 88. This U preferably achieved by retrieving 
die phone number of die financial institiition's control center from memory 88 and using 
25 communications interface 1 12 to establish a communications link widi die control center. 
Then, by communicating widi die control center, customer processor 80 receives 274 
fimher instructions and information. As a result of diis communication, processor 80 may 
obtain payment audiorization or it may receive instructions to terminate die transaction 
without pajrment 
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As mentioned above, the. customer card may also be used as a credit caid. 
Currently, credit card companies require that on-line authorization be obtained for most 
transactions. Thus, when customer caid 74 is used as a credit caid. a communications link 
is established widi an appropriate authorizing entity to obtain payment autfiorization. This 
5 is preferably achieved by retrieving the phone number of the authorizing entity from 
memory 88 and using communications interface 1 12 to establish a communications link 
with the common control center. Then, by communicating with the authorizing entity, 
customer processor 80 can obtain the proper payment authoriz^on. 

Referring again to Fig. 4d, if payment autiiorization is received 206 by base 
10 processor 100, tiien die payment is carried out But, if payment is not authorized, base 
processor 100 prompts the customer for anoAer form of payment Once die payment is 
autiiorized, all relevant transaction information is stored 208 in memory 102. This 
inchides requesting and receiving demographics information from the customer device 74. 
Thereafter, base processor 100 sends 210 relevant transaction infiomation to each of die 
15 devices 74, 76. 1 16 to aUow each device to maintain in its non-volatile memory a journal 
of all transactions made using tfiat device. After step 210. die transaction is tenninated 
212. 

The opCTation described above is repeated for each transaction. During die couree 
of a day, many transactions are conducted as off-line transactions. Information pertaining 

20 to all of these transactions is retained in memoiy 102. Preferably, at die end of a day, or 
some otfier period, data from naemoiy 102 is transmitted to a record-keeping facility for 
records posting and account reconciliation. Base device 72 perfbms diis procedure by 
first establishmg a communications link widi die record-keeping faciUty using 
comraunications interface 1 12, and tfien sending all of die transaction information stored 

25 widiin memory 102 to die facUity. After transmitting die stored information, base device 
72 is ready for another day of transactions. 

In system 70, substantially all transactions are carried out off-line. However, diere 
may be instances, such as where certain redemption or allocation Umits are exceeded, in 
which die devices 72. 74. 76 lack die information or autiiorization to follow tiirough witii a 

30 transaction. In such instonces, die selective on-line mode of die base processor is invoked. 
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The fiaud detection aspect of this operational mode was desoibed previously. TTie 
authorization and infomation acquisition aspect of the selective on-line mode will now be 
described. With reference to Fig. 9, authorization and infonnation acquisition begins with 
retrieving 400 conti-ol center infonnation from one of the devices 74, 76, 116. Which 
5 device holds this information is a fimction of tiie additional information or audiwization 
needed. Using this information and communications interface 1 12, base processor 100 
establishes 402 a link widi a common control center. Thai, processor 100 requests 
authorization from the center for a specified operation. Whae authorization is pven, 
processing simply continues. However, where authorization is not obtained, base 
10 processor 100 receives 406 from the condx)l center additional information and instiuctions. 
These instructions may order the processor 100 to limit die number of incentive credits 
that may be redeemed or aUocated, or they may order tfie prxicessor 100 to prweed with a 
certain operation. Base processor 100 processes 408 these instiuctions to carry out the 
desired functions. 

1 5 Each time base processor 100 invokes the on-line mode of operation, the common 

control cen 2r is given the opportunity to update tiie contents of RDD 116. If base 
processor 100 determines 360 that the control center wishes to update RDD 1 1 6, base 
processor 100 genoates and sends 364 an update control signal to die RDD 1 16. RDD 
processor 1 18 monitors 500 for this update control signal and, if the signal is active, RDD 

20 processor 1 18 receives 502 update instructions from the contiol center via communications 
mtoface 1 12 and processes 504 these instructions to implement the update. In Uiis 
manner, a control center can keep die contents of the RDD 1 16 and hence, the base device 
72, current TTie selective on-Une mode of die present invention is an advantageous featiire 
because it allows routine decisions to be made by the customer, provider, and devices 

25 while, at die same time, providing a means for selectively contacting a common control 
center when difficult decisions arise, without intcrrapting the performance of odier off-line 
functions. Wth tiiis feanire, die system of the present invention is able to offer the 
advantages of bodi an off-line system and an on-line system. 
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10 



What is claimed is : 

1 . A method for conducting transactions, comprising the steps of:. 

deriving a transaction amount from an off-line transaction between a customer and 
a first provider, 

computing an incentive credit amount based on said transaction amount; 
incrementing an incentive credit total stored on a customer-carried, portable 
storage device by said incentive credit amount; and 

recording information relating to said transaction, including said incentive credit ' 
amount, in a firist base device. 

2. The method of claim 1 , further comprising the step of: 
prior to said deriving step, verifying that said portable storage device is a valid 
device for use in said transaction. 



15 3. The method of claim 1 , further comprising the step of: 

recording information relating to said transaction in said portable storage device to 
maintain a journal of all transactions made using said portable storage device. 

4. The method of claim 1 , wherein the computing step comprises the steps of: 
20 deriving an incentive code for said transaction amount; 

processmg said incentive code witii a customer incentive code stored in said 
portable storage device and a program incentive code stored in a provider storage device, 
to derive an incentive rate; and 

^plying said mcentive rate to said transaction amount to derive said incentive 
25 credit amount 

5. The method of claim 1 , further comprising the step of: 
transmitting the information stored in said first base device to a record-keeping 

facility after said transaction is completed. 
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6. The method of claim 5, further comprising the step of: 
paying, by said firet provider, an amount proportional to said incentivi credit 
amount into a trust account. . * 

^ ^- The method of claim 1. further comprising the stq)s of: 

deriving a second transaction amount from a subsequent off-line transaction 
between said customer and a second provider; 

applying a selected number of incentive credits to said subsequent transaction, 
thereby reducing said second transaction amount by a discounted amount; 

decrementing said incentive credit total stored in said portable storage device by 
said selected number of incentive credits; and 

recordmg information relating to said second transaction, including said discounted 
amount, in a second base device. 

8. The metiiod of claim 7, further comprising the step of: 

transmitting the information stored in said first and second base devices to a 
record-keepmg facility after said subsequent transaction is completed. 
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9. The metfiod of claim 8. further connprising die steps of: 

20 P*y™& by said first provider, an amount proportional to said incentive credit 

amount into a trust account; and 

receiving, by said second provider fiom said trust account, payment in an araoum 
proportional to said discourited amount. 



15 



25 



10. The metiiod of claim 7. wherein said first and second providers are the 
same entity. 



11. 

same device. 

30 



method of claim 7. wherein said first and second base devices are the 
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12. A method for conducting transactions, comprising the steps of: 
deriving a transaction amount from an off-line transaction between a customer and 
a provider; 

determining whether an incentive credit total stored in a customer-carried, portable 
5 storage device has a non-zero value; 

in response to a determination that said incentive credit total has a non-zero value, 
determining whedier said customer wishes to apply any incentive credits to said 
transaction amount; 

in response to a determination that said customer wishes to apply incentive credits 

10 to said transaction amount, applying a selected number of incentive credits to said 
transaction amount, thereby reducing said transaction amount by a discounted amount; 

decrementing said incentive credit total stored in said portable storage device by 
said selected number of incentive credits; 

computing an incentive credit amount to aUocate to said customer; 
incrementing the incentive credit total stoi«I in said portable storage device by said 
incentive oedit amount; and 

recording information relating to said transaction, including said discounted 
amount and said incentive credit amount, in a base device. 

20 13. The method of claim 12, further comprising the step of: 

prior to said deriving step, verifying that said portable storage device is a valid 
device for use fai said transaction. 

14. The method of claim 12, further comprising the step of: 

25 recording information relating to said transaction in said portable storage device to 

maintain a journal of aU transactions made using said portable storage device. 

15. The method of claim 12. wherein the computing step comprises the steps 

of: 

30 deriving an incentive code for said transaction amount; 

26 ' 
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piocessing said incentive code with a customer incentive code stored in said 
portable storage device and an incentive program code stored in a provider storage device 
to derive an incentive rate; and 

^plying said incentive rate to said transaction amount to derive said incentive 
5 credit amount 



16. The mediod of claim 12, further comprising the step of: 

transmitting die information stored in said base device to a record-keeping facility 
after said transaction is completed 

17. "Hiemethodof claim 16, further comprising die step of: 
receiving payment in an amount proportional to said discounted anwunt 



10 



18. Hie method ofclaim 17. further comprising die step of: 

15 paying mto a trust account an amount proportional to said incentive credit amount 

19. A qrstem for conducting transactions, con^jrising: 

a customer-carried portable device comprising a customer memoiy having an 
incentive credit total stored dierein; 

20 a provider device conqmsing a provider memoiy; and 

a base device operatively coupled to said portable device and said provider device, 
said base device comprising a base processor for deriving a transaction amount from an 
off-Une transaction conducted between a customer and a provider and computing an 
incentive credit amount based on said transaction amount, said base processor sending said 

25 incentive credit amount to said portable device for updating the incentive credit total 

stored in said customer memory, and sending said incentive credit amount to said provider 
device for storage within said provider memory. 



20. Hie system of claim 1 9, wherein said customer memory has a customer 

30 incentive code stored tiiercin and said provider memory has at least one incentive program 
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15 



code stored therein, wherein said base device ftirther comprises a base memory coupled to 
said base processor having a plurality of incentive codes stored therein, and wherein said 
base processor computes said incentive credit amount by retrieving an incentive code from 
said base memory, retrieving said customer incentive code from said customer memory, 
retrieving said incentive program code from said provider memory, processing said, 
incentive code widi said customer incentive code and said incentive program code tb " 
derive an incentive rate, and applying said incentive rate to said transaction amount to 
derive said incentive credit amount 

21. The system of claim 19, wherein said portable device further comprises a 
customer processor coupled to said customer memory, said customer processor receiving 

said incentive credit amount from said base processor and updating the incentive credit 
total stored in said customer memory by adding said incentive credit amount to said 
incentive credit total. 



22. The system of claim 19, wherein said portable device further comprises a 
customer processor coupled to said customer memory, and wherein said system further 

coiiqMiscs an input device coupled to said portable device, said customer p^^^ 
receiving a user code from said input device and comparing said code to a reference user 
20 code stored in said customer memory to determine whether said user code is valid. 

23. The system of claim 19. wherein said portable device further comprises a 
customer processor coupled to said customer memory, said customer processor sending 
and receiving encrypted signals to and from said base processor to verify that said base - 

25 device and said portable device are valid devices for use in said transaction. 

24. The system of claim 19. wherein said provider device further comprises a 
provider processor coupled to said provider memory, and wherein said system further 
comprises an input device coupled to said provider device, said provider processor 

28 
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receiving a provider code from said input device and comparing said code to a reference 
provider code stored in said provider memory to determine whether said user code is valid, 

25. The system of claim 19, wherein said provider device further comprises a 
5 provider processor coupled to said provider memory, said provider processor sending and 

receiving encrypted signals to and firom said base processor to verify that said base device 
and said provider device are valid devices for use in said transaction. 

26. The system of claim 19. wherein said portable device further comprises a 
10 customer processor coupled to said customer memory and wherein said system further . 

comprises a co m m uni cations interface, said customer processor determining whether to 
authorize payment of said transaction amount and, in response to a determination not to 
authorize payment, said customer processor conununicating with a financial institution via 
said conomunications interface to obtain payment authorization th^from. 

15 

27. The system of claim 19, wherein said system further comprises a 
communications interface, and wherein said base processor determines whether sufficient 
audiorization exists within said system to cooqilete said transaction, and in response to a 
determination that additional authorization is needed, said base processor conrmiunicating 

20 with a control center via said conununications interface to obtain additional authorization 
therefirom. . • 

28. Hie system of claim 19, wherein said base device further comprises a base 
memory coupled to said base processor, and wherein said base processor stores 

25 information relating to said transaction, including said incentive credit amount, in said 
base memory. 

29. The system of claim 27, wherein said base device further comprises a 
conmnmications interface coupled to said base processor, and wherein said base processor 
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transmits the information stored in said base memory to a record-keeping facUity via said 
communications interface after said transaction is completed. 

30. The system of claim 1 9, wherein said base device further comprises a 
5 communications interface coupled to said base processor, and wherein said base processor 

communicates with a control center via said conunnnications interface to determine 
wheflier said portable device is a valid device, and in response to a determination that said 
portable device is an invalid device, said base processor sending a deactivation signal to 
said portable device to deactivate said portable device. 

31. The system of claim 30, wherein said portable device further convulses a 
customer processor coiq)led to said customer memory, and wherein said customer 
processor receives said deactivation signal and responds by deactivating said portable 
device. 

15 

32. A system for conducting transactions, comprising: 

a customer-carried portable device conq>rising a customer memory having an 
incentive credit total stored therein and a customer processor coupled to said customer 
memory, said customer processor generating a control signal when said incentive credit 
20 total has a non-zero value; 

a provider device comprising a provider memoiy; and 

a base device operatively coupled to said portable device and said provider device, 
said base device comprising a base processor for deriving a transaction amount from an 
off-line transaction conducted between a customer and a provider, said base processor 
25 receiving and responding to said control signal by ^plying a selected number of incentive 
credits to said transaction amount to reduce said transaction amount by a discounted 
amount, said base processor sending said selected number of incentive credits to said 

portable device for updating said incentive credit total, said base processor further 
computing an incentive credit amount based on said transaction amount and sending said 

30 incentive credit amount to said portable device for further updating said incentive credit 

30 



wo 95/21428 



PCT/DS9S/614M 



total, said base processor sending said incentive credit amount and said discounted amount 
to said provider device for storage within said provider memory. 

33. The system of claim 32, wherein said customer memory has a customer 
5 incentive code stored therein and said provider memory has at least one incentive program 
code stored tfierein, wherein said base device further comprises a base memory coupled to 
said base processor having a pluraUty of mcentive codes stored therein, and wherein said 
base processor computes said incentive credit amount by retrieving an incentive code fioni 
said base memory, retrieving said customer incentive code fiom said customer memory, 

10 retrieving said incentive program code from said provider meinoiy, processing said 
incentive code with said customer incentive code and said incentive program code to 
derive an i:icentive rate, and applying said incentive rate to said transaction amount to 
doive said incentive credit amount 

[5 34. The system of claim 32, wherein said customer processor receives said 

selected number of incentive credits and updates the incentive credit total stored in said 

customer memory by subtracting said selected number of incentive credits from said 
incentive credit total. 

10 35. The system of claim 32, wherein said customer processor receives said 

incentive credit amount from said base processor and updates tiie iucentive credit total 
stored in said customer memory by adding said mcentive credit amount to said incentive 
credit total. 

5 36. The system ofclaim 32, wherein said system further comprises an input 

device coupled to said portable device, and wherein said customer processor receives a 
user code from said input device and compares said code to a reference user code stored in 
said customer memory to determine whether said user code is valid. 
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37. The system of claim 32. wherein said customer processor sends and 
receives encrypted signals to and from said base processor to verify that said base device 
and said portable device are valid devices for use in said transaction. 

5 38. The system of claim 32, wherein said provider device further comprises a 

provider processor coupled to said provider mranory. and wherein said system further 
comprises an input device coupled to said provider device, said provider processor 
receiving a provider code from said input device and conq)aring said code to a reference 
provider code stored in said provider memory to detennine whether said user code is valid. 

10 

39. The system of claim 32, wherein said provider device fimher comprises a 
provider processor coupled to said provider memory, said provider processor sending and 
receiving encrypted signals to and from said base processor to verify that said base device 
and said provider device are valid devices for use in said transaction. 

15 

40. The system ofclaim 32. wherein said system further comprises a 
communications interface, and wherein said customer processor determines whether to 
autfiorize payment of said transaction amount and, in response to a determination not to 
authorize payment, said customer processor communicates with a financial institution via 

20 said communications interface to obtain paynwnt authorization therefrom. 



41. The systenn of claim 32. wherein said system further comprises a 
communications interface, and wherein said base processor deteiroines whether sufficient 
authorization exists within said system to complete said transaction, and in response to a 

25 determination that additional authorization is needed, said base processor communicates 
with a control center via said communications interface to obtain additional authorization 
therefrom. 

42. The system of claim 32. wherein said base device further comprises a base 

30 memory coupled to said base processor, and wherein said base processor stores 
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information relating to said transaction, including said incentive credit amount, in said 
basememoiy. 

43. The systan of claim 42, wherein said base device fiuther comprises a 

5 commumcations interface coupled to said base processor, and wherein said base processor 
transmits the information stored in said base memory to a record-keeping facility via said 
communications interface after said transaction is completed. 

44. The system of claim 32, wherein said base device further comprises a 

10 communications interface coupled to said base processor, and wherein said base processor 
communicates with a control center via said communications interface to determine 
whether said portable device is a vaUd device, and in response to a determination that said 
portable device is an invalid device, said base processor sondes a deactivation signal to 
said portable device to deactivate said portable device. 



15 



45. TI» system of claim 44, wherein said customer processor receives said 
deactivation signal and responds by deactivating said portable device. 
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